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DETAILED ACTION 

1. This is a Final Office Action in response to the applicant's communication filed on 
February 14, 2008. 

2. Claims 1-20 have been examined are pending. 



Claim Rejections - 35 USC §101 

3. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of matter, or 
any new and useful improvement thereof, may obtain a patent therefor, subject to the conditions and 
requirements of this title. 

4. Claims 10-18 are rejected under 35 U.S.C. 101 because the claimed invention is directed 
to non-statutory subject matter. Although the claims are identified as "System", the components 
of the "system" are instructions executed by a computer and are thus considered programs per 
se Use of the word "system" does not inherently mean that the claim is directed to a machine. 
Only if at least one of the claimed elements of the system is a physical part of a device can the 
system as claimed constitute part of a device or a combination of devices to be a machine within 
the meaning of 101. They are, at best, a functional descriptive material per se Therefore, claims 
10-18 are rejected as a system of Software per se, failing to fall within a statuary category of 
invention. See MPEP 2106 (IV)(B)(1) Functional descriptive Matter. 
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Response to Arguments 

5. Applicant's arguments filed on February 14, 2008 have been fully considered but they are 
not persuasive. 

Regarding claims 10-18 rejection under 35 USC 101, the applicant argues that because 
the claimed instructions are stored on a computer-readable medium, the fact that the instructions 
are stored makes the instructions a system and the stored instructions are a statutory subject 
matter. The examiner disagrees with the applicant's argument because the claims call for a 
system and just a stored instruction only by itself docs not make the claims a system. In the 
claims, all elements of the claimed features are stored instructions. Only if at least one of the 
claimed elements of the system is a physical part of a device can the system as claimed 
constitute part of a device or a combination of devices to be a machine within the meaning of 
101. Therefore, the applicant's argument is not persuasive to overcome the 101 rejections of 
claims 10-18. 

Regarding claims 1-20 rejection under 35 USC 102, the applicant argues that: 

"the Engberg reference fails to teach sequencing an encryption key transaction from a 
trusted service for generating for an individual a consumer identifier by issuing from a 
trusted service a primary key to the individual, issuing to the individual a unique 
identifier from said trusted service, and permitting the individual to generate and 
maintain a consumer-defined sequence through said trusted service. Instead, cited 
portions of the Engberg reference teach not using a trusted service to generate a 
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consumer identifier. In addition, the cited portions of the Engberg reference teach use of 
a SYMKEY that is generated using the public key of the company rather than 
generating a consumer identifier by issuing a primary key and a unique identifier 
from the trusted service and by allowing an individual to generate a consumer-defined 
sequence through the trusted service. Accordingly, since the Engberg reference fails to 
teach all " 

The examiner disagrees with the applicant's analysis because the features alleged by the 
applicant is disclosed by Engberg as follows: [0400] Trusted party TP (Trusted service) creates 
key pair (Cl.Vir.Pu, Cl.Vir.Pr). The Public Key is forwarded to and signed by CLIENT and 
the signature is returned to TP (which discloses the trusted service issues as primary key to the 
individual client). [0401] Secret key of VID (Cl.Vir.Pr) is known only to TP, as TP is backing 
the authenticity of VID to CLIENT (issued virtual identifies to client). Therefore despite the 
applicant's argument, consumer identifier is generated using trusted services by issuing a key and 
identifier from trusted service. For these reasons, the applicant's argument is not persuasive to 
overcome the prior arts in record to place independent claims 1, 10 and 19 in condition for 
allowance. Dependant claims 2-9, 12-18 and 20 are also not placed in condition for allowance 
based on their dependency from their corresponding independent claims. 

Claim Rejections - 35 USC § 102 

6. The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 
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A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

7. Claims 1-20 are rejected under 35 U.S.C. 102(b) as being anticipated by Engberg (US 
Pub No.: 2003/0158960 Al). 

As per claim 1 : 

Engberg discloses a method for preventing identity theft in electronic communications, 
comprising the steps of: 

sequencing an encryption key transaction from a trusted service for generating for an individual a 
consumer identifier by performing the steps of: 

(0228-0229; Master key, Client keys, temporary keys; [0260] A Virtual Identity is a 
pseudonym for an individual created for a specific purpose. Using the Trusted Party 
(TP), an individual can assume use a VID to communicate, trade etc. anonymously and 
under full control of the process. [0265] TP— Trusted Party—is generally treated as one 
entity identified by a TP Token Identifier or the public key of TP (TP.Pu) that can be 
verified in official registers such as X500 or X509. [0366] Establish a CLIENTKey which 
is a general symmetric encryption key between TP and CLIENT. [0401] Secret key of 
VID (CI. Vir.Pr) is known only to TP, as TP is backing the authenticity of VID to CLIENT. 
/0400]-[040ip. 

issuing to the individual a unique identifier from said trusted service; and 
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([0391] Establish VIZ) (CLIENT/COMPANY). [0395] CLIENT establishes an anonymous 
identity towards a relation under full CLIENT control. [0401] Secret key of VID 
(CI. Vir.Pr) is known only to TP, as TP is backing the authenticity of VID to CLIENT.) 
permitting the individual to generate and maintain a consumer-defined sequence through said 
trusted service; and 

([0404] This invention works with a secret shared symmetric key SYMKEY to encrypt 
communication between CLIENT and COMPANY. In the following the SYMKEY is 
treated as if it is reused from session to session; however the SYMKEY can just as well be 
generated as part of establishing a session as a session specific encryption key which is 
saved together with communication encrypted by the public key of CLIENT (Cl.Pu). 
[0405] SYMKEY can be created without revealing this to TP.) 
allowing the individual to control access to commercially related use of said consumer identifier 
by third parties . 

([0475] When creating a virtual identity on behalf of CLIENT, TP creates a new set of 
signature keys (CI. Vir.Pr and CI. Vir.Pu). TP keeps the private key CI. Vir.Pr which is not 
revealed to anyone else.) 



As per claim 2: 

Engberg discloses a method, comprising the steps of verifying commercially related use 
of said consumer identifier, comprising the steps of: 

initiating a verification process from a requesting business entity via a secure connection 
(0737; 0743); 
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comparing said consumer identifier with a pre-determined set of database records using 
said consumer-defined sequence in response to initiating said verification process 
(0489); 

presenting a positive or negative confirmation to said requesting business, said business 

having registered with said trusted service (0491); and 
confirming requested information relating to the individual via said secure connection, 

said requested information have been pre-authorized for presenting to said 

requesting business entity by the individual (0490). 

As per claims 3 and 12: 

Engberg discloses a method and instructions stored on a computer-readable medium, 
comprising the step of reporting to the individual the number of times at least one requesting 
business entity has initiated a verification process (0949-0952). 

As per claim 4: 

Engberg discloses a method and instructions stored on a computer-readable medium, 
comprising the step of confirming requested information relating to the individual including the 
individual's name, address, and photograph (90279; 0341-0342). 



As per claim 5 : 
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Engberg discloses a method and instructions stored on a computer-readable medium, 
comprising the step of confirming requested information relating to the individual including the 
individual's fingerprints (0338-0039; 0453). 

As per claim 6: 

Engberg discloses a method and instructions stored on a computer-readable medium, 
comprising the steps of storing said consumer identifier on a remote business database system 
and permitting the individual to modify said consumer identifier through a secure connection to a 
remote location (0694-0696). 

As per claim 7: 

Engberg discloses a method and instructions stored on a computer-readable medium, 
comprising the step of issuing to the individual a unique identifier from said trusted service 
according to a pre-determined set of business rules associated with a remote business database 
system (0270). 

As per claim 8: 

Engberg discloses a method and instructions stored on a computer-readable medium, 
comprising the step of allowing the individual to control commercial transactions using said 
consumer identifier (0552-0556). 



As per claim 9: 
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Engberg discloses a method and instructions stored on a computer-readable medium, 
comprising the step of issuing to the individual a unique identifier from said trusted service, said 
unique identifier conveying in encrypted information relating to the individual's age and locale 
(0881; 0888). 

Claims 10 and 11 are a system comprising instruction stored on a computer-readable medium for 
performing the steps of claims 1 and 2 respectively. Claims 10 and 11 are substantially similar to 
their corresponding method claims 1 and 2; and therefore, they are rejected with the same 
rationale given to reject claims 1 and 2 respectively. 

Claims 19 and 20 are a computer readable storage medium comprising instruction stored on a 
computer-readable medium for performing the steps of claims 1 and 2 respectively. Claims 19 
and 20 are substantially similar to their corresponding method claims 1 and 2; and therefore, they 
are rejected with the same rationale given to reject claims 1 and 2 respectively. 

Conclusion 

8. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See the notice of reference cited in form PTO-892 for additional prior art. 



THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 



Contact Information 

9. Any inquiry concerning this communication or earlier communications from the 

examiner should be directed to Techane J. Gergiso whose telephone number is (571) 272-3784 
and fax number is (571) 273-3784. The examiner can normally be reached on 9:00am - 6:00pm. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
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system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



/T.G./ 

May 8, 2008 
/Emmanuel L. Moise/ 

Supervisory Patent Examiner, Art Unit 2137 



